PT-2018-17546 · Brocade · Brocade Fabric Os

Publicado 2018-11-08 · Atualizado 2021-06-22 · CVE-2018-6433

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Brocade Fabric OS versions prior to 8.2.1 Brocade Fabric OS versions prior to 8.1.2f Brocade Fabric OS versions prior to 8.0.2f Brocade Fabric OS versions prior to 7.4.2d

Description A local attacker could bypass the export file access restrictions and initiate a file copy from the source to a remote system due to a vulnerability in the secryptocfg export command.

Recommendations For versions prior to 8.2.1, update to version 8.2.1 or later. For versions prior to 8.1.2f, update to version 8.1.2f or later. For versions prior to 8.0.2f, update to version 8.0.2f or later. For versions prior to 7.4.2d, update to version 7.4.2d or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-6433

Produtos afetados

Brocade Fabric Os

Referências · 4

• https://osv.dev/vulnerability/CVE-2018-6433 · Aviso do Fabricante
• https://t.me/cvenotify/16667 · Publicação no Telegram
• https://broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2018-728 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6433 · Nota de Segurança